Privacy Policy

Privacy Policy | Inside Track

Inside Track · myinsidetrack.co.uk

Privacy Policy

This Privacy Policy explains how Inside Track Limited collects, uses, stores, shares and protects personal data in connection with the Inside Track website and platform.

  • Effective: 13 July 2026
  • Version 1.1
  • UK GDPR

This policy applies to visitors to myinsidetrack.co.uk, authorised users of the Inside Track platform, contacts at client organisations, and people whose information authorised users enter into the platform. It should be read alongside our Cookie Policy.

1. Who We Are

Inside Track Limited is the data controller for personal data collected through our website, user accounts, subscription administration, billing, support, business communications and service security.

Where an authorised user enters seller, prospect or other third party information into the Inside Track platform, the client organisation is the data controller and Inside Track Limited processes that information on its behalf, solely to provide the platform service and in accordance with the client organisation’s instructions.

Inside Track does not use client entered information for its own marketing, model training or unrelated purposes.

Inside Track Limited is incorporated in England and Wales under company number 16752811. Our registered office is 13 St. Marys Street, C/O PSF Accounting, Stamford, Lincolnshire, United Kingdom, PE9 2DE. Our ICO registration reference is ZC202763. For privacy enquiries, contact support@myinsidetrack.co.uk.

Back to top

2. Personal Data We Collect

2.1 Website visitors

  • Browser type, device type, pages visited and approximate location information collected through Google Analytics, where you have consented. Google Analytics uses the IP address briefly to derive general location information but does not log or store the IP address.
  • Information you voluntarily submit through enquiry or contact forms.
  • Cookie choices and consent records needed to remember and demonstrate your preferences.

2.2 Platform users (Authorised Users)

  • Name, business email address, company information and role, passed from your organisation’s Microsoft Entra ID at sign in or supplied by your organisation.
  • Your assigned platform role and permissions.
  • Activity data, including tool runs, product and buyer type selections, timestamps and technical information needed to operate and secure the service.
  • User entered content, including seller details, prospect names, roles, companies, sales context, notes, website content and document content submitted when generating a guide, assessment, campaign or coaching response.

2.3 Client contacts

  • Name, job title, business email address and telephone number.
  • Company name and address.
  • Contract, subscription and billing information.
  • Email and written correspondence.

2.4 Where the information comes from

We collect personal data directly from you, from your employer or client organisation, through Microsoft Entra ID, from other authorised users who enter information into the platform, and through website technologies such as cookies and analytics where you have consented.

2.5 Information required to provide the service

Your name, business email address, company information, role and account authentication information are required to create and operate a platform account. Contract and billing information is required to manage a subscription. If this information is not provided, we may be unable to create an account, provide platform access or manage the subscription.

2.6 What we do not collect

Call notes are stored locally in your browser and are not retained on our servers. We do not require or knowingly process special category personal data, such as health data, racial or ethnic origin, political opinions or trade union membership. Users should not enter special category or highly sensitive information unless their organisation has confirmed that this is necessary and lawful.

The website and platform are intended for business users and are not directed at children. We do not knowingly collect personal data from children.

Back to top

3. How We Use Your Personal Data

PurposeLegal basisFurther detail
Providing the website and platform serviceArticle 6(1)(b), contract performanceAccount authentication, platform access, guide generation, activity history and coaching responses.
Processing client entered third party dataClient organisation determines the lawful basis; Inside Track acts as processorProcessing seller, prospect and other third party information only on the client organisation’s instructions.
Activity logging, support and securityArticle 6(1)(b) and 6(1)(f), contract and legitimate interestsActivity history, guide regeneration, technical support, fraud prevention and service security.
AI generated contentArticle 6(1)(b), contract performanceProcessing inputs through Microsoft Azure OpenAI or OpenAI to generate guides, assessments, campaigns and coaching responses.
Managing subscriptions and billingArticle 6(1)(b) and 6(1)(c), contract and legal obligationBilling, invoicing, payment administration and VAT records.
Business communicationsArticle 6(1)(f), legitimate interestsResponding to enquiries and managing client and business relationships.
Website analyticsArticle 6(1)(a), consentGoogle Analytics on the marketing website where you have opted in through the cookie banner.
Legal compliance and claimsArticle 6(1)(c) and 6(1)(f), legal obligation and legitimate interestsMeeting legal duties, maintaining records and establishing, exercising or defending legal claims.

Our legitimate interests include operating and securing the service, supporting users, managing business relationships and protecting our legal rights. We consider whether these interests are necessary and balanced against the rights and interests of individuals.

Back to top

4. AI Processing

The Inside Track platform uses artificial intelligence services provided by Microsoft Azure OpenAI and OpenAI to generate guides, assessments, campaigns, sales content and coaching responses. The provider used may vary depending on the feature and the platform configuration.

When you use an AI powered feature:

  • the information you enter is sent to the relevant AI provider for processing;
  • the platform may also send system instructions, prompt templates, selected product and buyer context, relevant conversation history, website or document content, and other contextual information needed to operate the feature;
  • the information is processed to generate the requested guide, assessment, campaign, content or coaching response;
  • Inside Track does not use client entered information for its own marketing or to train AI models, and does not intentionally enable provider model training with that information; and
  • AI generated outputs may contain errors and should be reviewed before being relied upon.

The platform does not use AI to make decisions about individuals that produce legal or similarly significant effects.

Back to top

5. Who We Share Data With

We do not sell personal data. We may share personal data only where necessary with:

  • Microsoft, for Azure hosting, Microsoft Entra ID authentication and AI processing through Azure OpenAI where that service is used. Microsoft acts as a data processor under its contractual data protection terms.
  • OpenAI, for AI processing where a platform feature uses the OpenAI API. OpenAI acts as a data processor under its business service terms and data processing terms.
  • Google, for website analytics through Google Analytics where you have consented.
  • Professional advisers, including solicitors, accountants and auditors, where necessary and subject to confidentiality obligations.
  • Regulatory, government and law enforcement bodies, where disclosure is required by law or necessary to protect our legal rights.

These providers may use approved subprocessors to help deliver their services, subject to contractual and data protection requirements.

Back to top

6. International Transfers

Some of our service providers, including Microsoft, OpenAI and Google, may process personal data outside the United Kingdom or allow it to be accessed from other countries.

Where personal data is transferred outside the United Kingdom, we take steps to ensure that it remains protected. Depending on the destination and provider, these safeguards may include:

  • UK adequacy regulations;
  • the UK International Data Transfer Agreement;
  • the UK Addendum to the European Commission’s Standard Contractual Clauses; or
  • other safeguards permitted under UK data protection law.

Our providers may also use approved subprocessors in other countries, subject to contractual data protection requirements. Contact support@myinsidetrack.co.uk for more information about the safeguards used for international transfers.

Back to top

7. How Long We Keep Your Data

CategoryRetention period
Authentication and account dataDuration of the subscription plus 30 days.
Microsoft Entra ID authentication recordsRetained in accordance with Microsoft’s service configuration and the subscription settings used by Inside Track.
Platform activity logsRetained for the subscription term. After termination, access is removed and the data is reviewed for deletion or anonymisation, subject to legal, security or dispute requirements.
AI generated guide and campaign outputsNot retained on our servers beyond delivery to the browser, unless a feature clearly states otherwise.
Call notesStored in the user’s browser only and retained until the user clears them or browser data is removed.
Client contact informationDuration of the client relationship plus 3 years.
Contract and billing records7 years from the end of the relevant financial year or contract, as applicable.
General business correspondence3 years from the last contact.
Website analyticsEvent data is retained for 2 months. User data is retained for 14 months and resets when new activity is recorded. Aggregated reports may be retained for longer.

We may retain information for longer where this is required by law, needed to establish or defend legal claims, or necessary for security and fraud prevention.

Back to top

8. Your Rights Under UK GDPR

Depending on the circumstances and the lawful basis we rely on, you may have the following rights in relation to your personal data:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete personal data.
  • Right to erasure: to request deletion of your personal data in certain circumstances.
  • Right to restriction: to request that we restrict how we use your personal data in certain circumstances.
  • Right to data portability: to receive certain personal data you have provided to us in a structured, commonly used and machine readable format.
  • Right to object: to object to processing based on legitimate interests, and to object at any time to processing for direct marketing.
  • Right to withdraw consent: where we rely on your consent, including for website analytics cookies, you may withdraw it at any time through our cookie settings. Withdrawing consent does not affect processing carried out before consent was withdrawn.

The Inside Track platform does not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, contact support@myinsidetrack.co.uk. We normally respond within one calendar month. Complex or multiple requests may take up to two further months, and we will explain any extension.

You may complain to the Information Commissioner’s Office.

Back to top

9. Cookies

We use cookies and similar technologies on the marketing website. For details of the cookies we use, the purposes for which they are used and how to manage your choices, see our Cookie Policy.

Back to top

10. Security

We use appropriate technical and organisational security measures, including TLS 1.2 or later encryption in transit, AES 256 encryption at rest, Microsoft Entra ID authentication, role based access control and Azure enterprise security infrastructure.

Back to top

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or highlighted on the website where appropriate. The current version is available at myinsidetrack.co.uk/privacy and is effective from 13 July 2026.

Back to top

13. Contact Us

Inside Track Limited

Company number: 16752811

ICO registration reference: ZC202763

Registered office: 13 St. Marys Street, C/O PSF Accounting, Stamford, Lincolnshire, United Kingdom, PE9 2DE

Email: support@myinsidetrack.co.uk

Back to top